Privacy Notice

This notice explains how REIS GRC handles personal information submitted through this website.

1. Who is responsible

   REIS GRC is responsible for personal information submitted through this website. Questions or privacy requests can be sent to info@reisgrc.com or through the Contact page.

2. Information we receive

   We receive the details you choose to submit through contact, registration, pricing, partner and assessment forms. This may include your name, work email, phone number, organization, role, inquiry and message.

   The website and its security services may also process standard technical information needed to deliver and protect a request, such as an IP address, browser information and form-security signals.

   Please do not submit passwords, secrets, highly sensitive information or regulated personal data through public website forms.

3. How we use information

   Depending on the context, we process information to take steps at your request, communicate with you, operate and secure the website, meet legal obligations, and pursue legitimate business interests that do not override your rights. Where consent is required, you may withdraw it.

   • to respond to a request, registration or application
   • to send an assessment report when you request one
   • to operate, secure and improve this website
   • to keep an appropriate record of communications

4. Assessment forms and form protection

   Assessment answers are used only to calculate the result shown during your current visit. They are not saved in your browser after the assessment is closed or cancelled unless you choose to submit a report request.

   If a form presents a verification challenge, the challenge is provided by Cloudflare Turnstile. Its handling of information is governed by its own documentation and privacy terms.

5. Sharing and retention

   Information is shared only with people and service providers involved in responding to the request or operating the website. If information is processed in another country, we take reasonable steps to require appropriate protection. We retain it only for as long as reasonably needed for those purposes, subject to any applicable recordkeeping requirements.

6. Security and children

   We use reasonable administrative and technical measures designed to protect website information. No internet transmission or storage system is completely secure.

   This business website is not directed to children, and we do not knowingly request personal information from children through its public forms.

7. Your choices

   Subject to applicable law, you may ask to access, correct or delete personal information, restrict or object to processing, withdraw consent, or receive information in a portable form. You may also complain to the relevant data-protection authority. Use the contact details published on the Contact page; we may need enough information to verify the request.

8. Updates and external services

   This notice may be updated as website practices change. Third-party links and security services are governed by their own privacy practices.